Search results

Export Solidity contract paths for Hardhat 3 npmFilesToBuild

Status: Open.

#261 In 1inch/solidity-utils;

· zZoMROT opened on May 17, 2026

[MEDIUM] Short slices returned by BytesMemory::unwrap() leak adjacent data

cygent:mediumMedium severity security findingMedium severity security finding

cygent:openSecurity finding - OpenSecurity finding - Open

Status: Open.

#259 In 1inch/solidity-utils;

· cygent-dev opened on May 7, 2026

[HIGH] BytesMemory.unwrap misaligns the free-memory pointer, enabling overlapping allocations and tampering with previously returned bytes

cygent:highHigh severity security findingHigh severity security finding

cygent:openSecurity finding - OpenSecurity finding - Open

Status: Open.

#258 In 1inch/solidity-utils;

· cygent-dev opened on May 7, 2026

[HIGH] StringUtil::toHex(bytes) under-allocates free memory, enabling deterministic memory overlap that corrupts hex strings and downstream dynamic data

cygent:highHigh severity security findingHigh severity security finding

cygent:openSecurity finding - OpenSecurity finding - Open

Status: Open.

#257 In 1inch/solidity-utils;

· cygent-dev opened on May 7, 2026

[HIGH] Delegatecall-exposed functions use msg.sender instead of _msgSender(), allowing relayers to receive funds or control flows when executing signed calls

cygent:highHigh severity security findingHigh severity security finding

cygent:openSecurity finding - OpenSecurity finding - Open

Status: Open.

#256 In 1inch/solidity-utils;

· cygent-dev opened on May 7, 2026

[HIGH] Signer impersonation via reentrancy because _msgSender() trusts stale stack entries

cygent:highHigh severity security findingHigh severity security finding

cygent:openSecurity finding - OpenSecurity finding - Open

Status: Open.

#255 In 1inch/solidity-utils;

· cygent-dev opened on May 7, 2026

[HIGH] Reentrancy allows arbitrary contracts to impersonate the signer during meta-calls

cygent:highHigh severity security findingHigh severity security finding

cygent:openSecurity finding - OpenSecurity finding - Open

Status: Open.

#254 In 1inch/solidity-utils;

· cygent-dev opened on May 7, 2026

[HIGH] Signer context persists during bySig delegatecalls, enabling reentrant impersonation of signer-protected functions

cygent:highHigh severity security findingHigh severity security finding

cygent:openSecurity finding - OpenSecurity finding - Open

Status: Open.

#253 In 1inch/solidity-utils;

· cygent-dev opened on May 7, 2026

[HIGH] Using msg.sender instead of _msgSender() allows relayers to receive funds intended for the signed caller

cygent:highHigh severity security findingHigh severity security finding

cygent:openSecurity finding - OpenSecurity finding - Open

Status: Open.

#252 In 1inch/solidity-utils;

· cygent-dev opened on May 7, 2026

Free OAPS Pilot – Verifiable On-Chain Proof for solidity-utils Artifacts

Status: Open.

#222 In 1inch/solidity-utils;

· nwukodavid opened on Jan 13, 2026

type error: deployContract from utils.ts

Status: Open.

#208 In 1inch/solidity-utils;

· mayar-deeb-xi opened on Oct 2, 2025